Skip to content
Connect Workplace Reservation Management with Microsoft Teams › Configure › Workplace Reservation Management › Workplace Service Delivery › Employee Service Management
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Authenticate Microsoft Teams with Microsoft Azure

Set up authentication with Microsoft Azure to connect Microsoft Teams with Workplace Reservation Management application.

Before you begin

Role required: Azure Active Directory administrator

About this task

In order for Workplace Reservation Management to be able to generate Microsoft Teams meeting link and get the recordings, via Microsoft Graph API, permissions must be added.

Procedure

  1. Log in to the Microsoft Azure portal.

  2. Navigate to Azure Services > Azure Active Directory > Manage > App registrations.

  3. If you do not have an app registration, select New registration.

    1. On the form, enter the Name of the registration.

    2. Select the Supported account types of your choice.

    3. Specify the Redirect URL.

      Specify the following details:

      1. Select the platform as Web.
      2. Enter the URL in the following format: https://<instance-Name>.service-now.com/oauth_redirect.do
      3. If you already have an app registration, select the app registration.

    4. Navigate to Manage > Authentication.

    5. Navigate to Add a platform > Web applications > Web.

    6. On the Configure Web form, fill the fields.

      FieldDescription
      Redirect URLEnter a URL in the format: https://[instance].service-now.com/oauth_redirect.do
      Implicit grantCheck Access tokens, and ID tokens

    7. Select Configure.

  4. Add a client secret.

    1. Navigate to Manage > Certificates and secrets.

    2. Select New client secret

    3. In the Description field, enter a short description about the secret.

    4. Under Expires, select an expiry.

    5. Select Add.

    6. After adding, in the Client secrets section, copy the value by clicking Copy to clipboard.

  5. Add a permission.

    1. Navigate to Manage > API permissions.

    2. Select Add a permission.

    3. Select Microsoft Graph.

    4. Select Application permissions.

Permission nameDescriptionRequired to
User.Read.AllRead all users profilesCreate virtual meeting link
OnlineMeetings.ReadWrite.AllRead and create online meetingsCreate virtual meeting link
Chat.Read.All

Read all chat messagesNote:

This is optional and is required only to retrieve meeting recordings.

Retrieve meeting recording
5.  Select **Chat.Read.All**, **OnlineMeetings.ReadWrite.All** and **User.Read.All**.

    **Note:** Select **Chat.Read.All** to retrieve the meeting recordings.

6.  Select **Add permissions**.

7.  On the Configured permissions screen, select **Grant admin consent for ServiceNow**.

8.  Select **Yes**.

    A confirmation message is displayed that admin consent is granted for the requested permissions.

  1. Configure application access policy and allow applications to access online meetings.

    1. Open the Windows' PowerShell as an administrator to run scripts.

    2. Identify the app's application (client) ID and the user IDs of the users on whose behalf the app is authorized to access online meetings.

    3. Connect to Skype for Business PowerShell with an administrator account.

    4. Create an application access policy containing a list of app IDs.

      Run the following cmdlet, replacing the Identity, AppIds, and Description (optional) arguments.

      New-CsApplicationAccessPolicy -Identity Test-policy -AppIds "ddb80e06-92f3-4978-bc22-a0eee85e6a9e", "ccb80e06-92f3-4978-bc22-a0eee85e6a9e", "bbb80e06-92f3-4978-bc22-a0eee85e6a9e" -Description "description here"

    5. Grant the policy to the user to allow the app IDs contained in the policy to access online meetings on behalf of the granted user.

      Run the following cmdlet, replacing the PolicyName and Identity arguments.

      Grant-CsApplicationAccessPolicy -PolicyName Test-policy -Identity "748d2cbb-\
3b55-40ed-8c34-2eae5932b22a"

    6. Grant the policy to the whole tenant (Applies to users who don’t have an application access policy assigned).

      Run the following cmdlet, replacing the PolicyName argument.

      Grant-CsApplicationAccessPolicy -PolicyName Test-policy -Global

    Note: All employees who can create or update reservations must be included in the application access policy.

Result

The Microsoft Teams is set up with Microsoft Azure.

Note: For more information about allowing applications to access online meetings, see Microsoft documentation.

Parent Topic:Connect Workplace Reservation Management with Microsoft Teams

Previous topic:Connect Workplace Reservation Management with Microsoft Teams

Next topic:Setup OAuth connectivity with Microsoft Teams Connections spoke for virtual meeting